Lucene search
+L

132 matches found

CVE
CVE
added 2025/05/05 11:31 p.m.65 views

CVE-2025-4298

The CVE-2025-4298 entry concerns Tenda AC1206 (up to version 15.03.06.23) with a vulnerability in the formSetCfm function of /goform/setcfm that causes a buffer overflow. Multiple sources confirm remote exploitation and potential arbitrary code execution, with high or critical impact on confident...

9.8CVSS8.8AI score0.00962EPSS
Exploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/03/25 12:0 a.m.8 views

The vulnerability of the formSetCfm() function in the Tenda F1202 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function in the Tenda F1202 router’s microprogramming software is related to the operation that goes beyond the buffer boundaries in memory when processing the funcpara1 parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.3AI score0.00807EPSS
Exploits1References3
OSV
OSV
added 2025/02/20 11:15 p.m.7 views

CVE-2025-25678

Tenda i12 V1.0.0.103805 was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function...

9.8CVSS6.1AI score0.00433EPSS
Exploits0References1
NVD
NVD
added 2025/02/20 11:15 p.m.22 views

CVE-2025-25678

Tenda i12 V1.0.0.103805 was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function...

9.8CVSS0.00433EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/20 12:0 a.m.9 views

PT-2025-7569 · Tenda · Tenda I12

Name of the Vulnerable Software and Affected Versions: Tenda i12 version 1.0.0.103805 Description: A buffer overflow issue was discovered in the formSetCfm function via the funcpara1 parameter. Recommendations: For Tenda i12 version 1.0.0.103805, as a temporary workaround, consider disabling the...

9.8CVSS7.5AI score0.00433EPSS
Exploits0References5
CVE
CVE
added 2025/02/20 12:0 a.m.78 views

CVE-2025-25678

CVE-2025-25678 affects the Tenda i12, version 1.0.0.10(3805). It describes a buffer overflow in the formSetCfm function triggered via the funcpara1 parameter, which could be exploited by a remote attacker to crash the application and cause a denial of service. Public sources corroborate a vulnera...

9.8CVSS9.8AI score0.00433EPSS
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:0 a.m.23 views

The vulnerability of the formSetCfm() function in the Tenda AC18 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function in the Tenda AC18 router’s microprogramming software is related to the issue where the write operation goes beyond the buffer boundaries in memory when processing the funcpara1 parameter. Exploiting this vulnerability allows a remote attacker to execut...

5.7CVSS6.3AI score0.00531EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2025/01/16 9:15 p.m.15 views

CVE-2024-57578

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the funcpara1 parameter in the formSetCfm function...

8.8CVSS0.00531EPSS
Exploits1References1
OSV
OSV
added 2025/01/16 9:15 p.m.2 views

CVE-2024-57578

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the funcpara1 parameter in the formSetCfm function...

8.8CVSS5.9AI score
Exploits0References1
CNNVD
CNNVD
added 2025/01/16 12:0 a.m.4 views

Tenda AC18 安全漏洞

The Tenda AC18 is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC18 version 15.03.05.19, which is caused by the funcpara1 parameter of the formSetCfm function failing to correctly validate the length of the input data, and can be exploited by an attacke...

8.8CVSS8.1AI score0.00531EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/01/16 12:0 a.m.17 views

CVE-2024-57578

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the funcpara1 parameter in the formSetCfm function...

0.00531EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/12/28 12:0 a.m.13 views

PT-2024-10240 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.19 Description: The issue is related to a stack overflow in the formSetCfm function due to the funcpara1 parameter. This can potentially allow a remote attacker to execute arbitrary code or cause a denial of servic...

8.8CVSS9.1AI score0.00531EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2024/09/26 12:0 a.m.7 views

The vulnerability of the formSetCfm function in the /goform/setcfm microprogramming software for the Tenda wireless access point allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function in the /goform/setcfm microprogramming system for the wireless access point Tenda is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause...

10CVSS8.4AI score0.01255EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/08/27 11:31 p.m.46 views

CVE-2024-8226 Tenda O1 setcfm formSetCfm stack-based overflow

A vulnerability has been found in Tenda O1 1.0.0.710648 and classified as critical. Affected by this vulnerability is the function formSetCfm of the file /goform/setcfm. The manipulation of the argument funcpara1 leads to stack-based buffer overflow. The attack can be launched remotely. The explo...

9CVSS0.01255EPSS
Exploits1References5
BDU FSTEC
BDU FSTEC
added 2024/07/23 12:0 a.m.5 views

The vulnerability of the formSetCfm function in the Tenda W30E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetCfm function in the Tenda W30E router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information by sending...

9CVSS8AI score0.01451EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:0 a.m.8 views

The vulnerability of the formSetCfm (/goform/setcfm) function in the Tenda AC500 router software allows a hacker to execute arbitrary code.

The vulnerability of the formSetCfm /goform/setcfm function in the Tenda AC500 router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted POST request...

9CVSS8.5AI score0.01906EPSS
Exploits1References4
CNVD
CNVD
added 2024/04/18 12:0 a.m.29 views

Tenda W30E formSetCfm Function Stack Buffer Overflow Vulnerability

The Tenda W30E is a wireless router developed by Tenda to provide a stable network connection for homes and small offices. A stack buffer overflow vulnerability exists in the formSetCfm function of the /goform/setcfm file in Tenda W30E version 1.0.1.25633. An attacker can exploit this vulnerabili...

9CVSS7.4AI score0.01451EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/04/16 12:0 a.m.7 views

Tenda W30E 安全漏洞

The Tenda W30E is a wireless router developed by Tenda to provide a stable network connection for homes and small offices. A stack buffer overflow vulnerability exists in the formSetCfm function of the /goform/setcfm file in Tenda W30E version 1.0.1.25633. An attacker can exploit this vulnerabili...

9CVSS7.4AI score0.01451EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/04/10 12:0 a.m.9 views

PT-2024-2875 · Tenda · Tenda Ac500

Name of the Vulnerable Software and Affected Versions: Tenda AC500 version 2.0.1.91307 Description: A critical issue affects the formSetCfm function of the file /goform/setcfm, leading to a stack-based buffer overflow when the funcpara1 argument is manipulated. This can be exploited remotely,...

9.8CVSS9.2AI score0.01906EPSS
Exploits1References7
BDU FSTEC
BDU FSTEC
added 2024/04/06 12:0 a.m.7 views

The vulnerability of the formSetCfm (/goform/setcfm) function in the Tenda AC7 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetCfm /goform/setcfm function in the Tenda AC7 router software is caused by a buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

9CVSS8AI score0.01684EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder